Report sharing strategy

[FabScone75]

Hi all, 

We have a setup where we grant our viewers a viewer role in the workspace, and report developers get contributor role. The issue with this is that we cannot grant a user access to a subset of the workspace reports. What then happens is users share the report(s) directly to specific users who have no role in the workspace. From a governance perspective, this is dificult to monitor and therefore not ideal. 

Instead, what I plan to do is use workspace Apps, with audiences to ensure that the appropriate user(s) get access to only the report(s) they are meant to see. From a governance perspective, it would be easier to administer and keep a check on.  I don't see any downsides to this approach. 

What would be great is to completely disable the abiltilty to share a report directly, but I don't see any setting that does that in the Fabric. Have I missed it? 

[FabScone75]

Hello @oussamahaimoud thank you for that. Those are helpful suggestions. 

[oussamahaimoud · Accepted solution]

No, you haven't missed anything. A dedicated "disable direct share at workspace level" toggle does not exist in Fabric today.

Your App + Audiences approach is the closest available governance control, and it is the right one.

To reduce direct sharing without fully blocking it:

• Remove Viewer-level workspace roles entirely; grant access only through the App.
• Users without a workspace role cannot share items they don't own or have resharing permission on.
• When publishing the App, uncheck "Allow all users to reshare this content" at the audience level, this prevents downstream resharing.